Stream Connect roles

reference brazil Updated Sep 10, 2026 1 min read stream-connect-apache-kafka-roles.md

Assign roles to specify what different users can see and do.

Roles

For more information about managing and assigning roles, see Managing roles.

Role	Description	Roles inherited
Kafka_admin	Manage integration with Kafka, including topics and settings related to kafka subscriptions.	sn_help_setup_player pd_author hermes_viewer pd_operator stream_connect_alert_viewer canvas_user view_changer fd_read_flows
kafka_namespace_admin	Manage Kafka namespace definitions. In an MSP instance with Kafka integrations in multiple domains, managing namespace definitions properly is important to maintain separation between domains, so it is recommended that this role not be granted to administrators within a single domain.	kafka_admin
stream_connect_admin	Management role for setting related to subscriptions, topics etc.	message_replication_admin stream_connect_api kafka_admin stream_connect_viewer kafka_namespace_admin connection_admin
stream_connect_alert_viewer	Read-only access to all stream connect alert records and logs.	None
stream_connect_api	Role with full access to invoke Stream Connect scriptable APIs	None
stream_connect_readonly_api	Role required to invoke read-only scriptable API calls related to Stream Connect	None
stream_connect_viewer	Role with read-only access to Stream Connect configuration and runtime statistics.	message_replication_user hermes_viewer stream_connect_readonly_api stream_connect_alert_viewer

**Parent Topic:**[Integration Hub reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/integrate-applications/integration-hub/integration-hub-reference.md)

137 lines · 2.7 KB Wrap lines

---
title: Stream Connect roles
description: Assign roles to specify what different users can see and do.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/integrate-applications/integration-hub/stream-connect-apache-kafka-roles.html
release: brazil
product: Integration Hub
classification: integration-hub
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Reference, Integration Hub, Workflow Data Fabric]
---

# Stream Connect roles

Assign roles to specify what different users can see and do.

## Roles

For more information about managing and assigning roles, see [Managing roles](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-administration/ua-creating-roles.md).

<table id="table_u4x_zmk_qhc"><thead><tr><th>

Role

</th><th>

Description

</th><th>

Roles inherited

</th></tr></thead><tbody><tr><td>

Kafka\_admin

</td><td>

Manage integration with Kafka, including topics and settings related to kafka subscriptions.

</td><td>

-   sn\_help\_setup\_player
-   pd\_author
-   hermes\_viewer
-   pd\_operator
-   stream\_connect\_alert\_viewer
-   canvas\_user
-   view\_changer
-   fd\_read\_flows

</td></tr><tr><td>

kafka\_namespace\_admin

</td><td>

Manage Kafka namespace definitions. In an MSP instance with Kafka integrations in multiple domains, managing namespace definitions properly is important to maintain separation between domains, so it is recommended that this role not be granted to administrators within a single domain.

</td><td>

kafka\_admin

</td></tr><tr><td>

stream\_connect\_admin

</td><td>

Management role for setting related to subscriptions, topics etc.

</td><td>

-   message\_replication\_admin
-   stream\_connect\_api
-   kafka\_admin
-   stream\_connect\_viewer
-   kafka\_namespace\_admin
-   connection\_admin

</td></tr><tr><td>

stream\_connect\_alert\_viewer

</td><td>

Read-only access to all stream connect alert records and logs.

</td><td>

None

</td></tr><tr><td>

stream\_connect\_api

</td><td>

Role with full access to invoke Stream Connect scriptable APIs

</td><td>

None

</td></tr><tr><td>

stream\_connect\_readonly\_api

</td><td>

Role required to invoke read-only scriptable API calls related to Stream Connect

</td><td>

None

</td></tr><tr><td>

stream\_connect\_viewer

</td><td>

Role with read-only access to Stream Connect configuration and runtime statistics.

</td><td>

-   message\_replication\_user
-   hermes\_viewer
-   stream\_connect\_readonly\_api
-   stream\_connect\_alert\_viewer

</td></tr></tbody>
</table>**Parent Topic:**[Integration Hub reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/integrate-applications/integration-hub/integration-hub-reference.md)